
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173D5E/346ECF12FE6711F0A75C8852536F56BC/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.mft
File: zbQhFiM7Qu9jJXWX1W0Sq__W3ik.mft (raw, json)
Hash identifier: 6m/NdKhTAyonMYf4X092/hCvgPrqn15Oe152nHK5jRE=
Subject key identifier: D7:72:41:E3:3D:B1:BC:BD:CD:B8:C3:5B:B0:C5:1C:76:C6:1D:FD:2A
Authority key identifier: CD:B4:21:16:23:3B:42:EF:63:25:75:97:D5:6D:12:AB:FF:D6:DE:29
Certificate issuer: /CN=A9173D5E/serialNumber=CDB42116233B42EF63257597D56D12ABFFD6DE29
Certificate serial: 2D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173D5E/346ECF12FE6711F0A75C8852536F56BC/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.mft
Manifest number: 2B
Signing time: Fri 17 Apr 2026 08:26:30 +0000
Manifest this update: Fri 17 Apr 2026 08:26:30 +0000
Manifest next update: Fri 24 Apr 2026 08:26:30 +0000
Files and hashes: 1: zbQhFiM7Qu9jJXWX1W0Sq__W3ik.crl (hash: 699Jv013/Muko4qT5aO1ohTA1mXgouG+NlE2Z5Sp4sQ=)
2: F7973D44FE6711F0B3245786536F56BC.roa (hash: /9TND/Fy3tWH0r9sdB0hp5hcFJoR57Y+G7/U1zoHag4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173D5E/346ECF12FE6711F0A75C8852536F56BC/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.crl
rsync://rpki.apnic.net/member_repository/A9173D5E/346ECF12FE6711F0A75C8852536F56BC/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 08:26:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45 (0x2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173D5E, serialNumber=CDB42116233B42EF63257597D56D12ABFFD6DE29
Validity
Not Before: Apr 17 08:26:30 2026 GMT
Not After : Apr 24 08:26:30 2026 GMT
Subject: CN=69e1eeb6-614b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b6:7a:a1:51:8d:d7:02:28:d2:03:27:f7:70:
96:7e:66:60:92:0c:80:3b:ac:84:be:ff:4f:6f:ec:
51:e4:6a:ea:42:a3:88:04:3e:12:3f:8d:cb:41:d8:
9c:4a:ff:0b:c6:a2:23:bd:69:6d:b6:98:36:63:f7:
5f:52:42:4f:8a:ee:1e:89:80:e9:4a:09:6e:5c:17:
94:85:be:25:2a:e4:0d:15:2e:6b:2e:c9:9c:9e:24:
61:a1:49:fe:6e:02:13:f7:88:2f:56:72:55:65:79:
a6:cf:bd:27:57:b5:b4:b1:d6:1e:30:84:25:ca:1d:
83:79:f1:b9:73:9d:7c:be:53:ff:49:dd:45:63:c4:
e1:df:aa:c2:7e:54:82:0b:d7:be:16:03:26:5f:95:
41:e5:db:51:dc:53:b0:82:cd:95:e2:b1:e9:77:43:
fe:23:a6:f0:c0:6e:b7:7e:85:3d:13:1a:a4:5e:bb:
64:18:c1:45:78:2e:1d:1d:df:0c:17:67:ae:44:5f:
be:58:d5:64:cd:a0:f5:50:2e:e2:7e:f3:48:33:49:
a6:bf:71:d2:68:25:8a:f5:8b:dc:48:94:34:1b:4a:
0e:81:a6:d6:6f:71:ae:31:6e:d8:9e:ea:4e:a5:19:
b0:b0:f7:07:4d:10:69:77:26:0a:14:66:9b:d9:0e:
1f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:72:41:E3:3D:B1:BC:BD:CD:B8:C3:5B:B0:C5:1C:76:C6:1D:FD:2A
X509v3 Authority Key Identifier:
keyid:CD:B4:21:16:23:3B:42:EF:63:25:75:97:D5:6D:12:AB:FF:D6:DE:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173D5E/346ECF12FE6711F0A75C8852536F56BC/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173D5E/346ECF12FE6711F0A75C8852536F56BC/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:08:2a:06:63:91:f9:e4:56:39:cb:ce:5c:d8:b9:44:5e:be:
d7:20:6a:ce:71:50:53:5f:ad:cd:b2:b8:f6:51:34:62:ba:26:
82:ca:81:15:ea:1f:7e:ed:b3:34:44:2e:8f:93:ee:cb:9f:cd:
d1:7c:7f:1e:0c:f1:28:a6:37:5c:46:2c:b8:75:c7:65:30:ce:
af:de:fa:48:a0:14:c4:67:e5:6d:bc:a1:28:1e:03:5f:9c:33:
86:55:14:f3:c6:cd:13:c7:13:9c:09:f3:c3:6b:cc:c5:3d:b3:
7e:c0:66:bb:6e:77:91:91:9a:5b:d1:b8:b1:0b:3e:e3:f4:35:
4e:dc:96:8e:ff:e3:94:79:ab:ec:16:11:03:b2:bc:c7:e2:89:
ed:c9:05:7e:66:21:7f:0b:22:c3:f5:be:f7:49:b0:72:7b:c7:
eb:3c:55:45:12:0e:81:30:29:a0:9e:49:95:89:17:1a:99:f6:
bf:9c:0b:5d:4a:9e:3a:99:36:7c:8f:b2:b0:47:c3:57:62:c5:
c3:48:09:9c:f9:de:4b:3b:6d:bc:44:a3:d5:07:c4:e0:a2:63:
e5:17:88:41:d5:f4:73:0d:60:2c:20:a8:37:fb:24:dc:0c:a4:
ce:0b:aa:04:df:fe:cb:09:06:90:d5:07:02:18:34:14:1c:a7:
7c:d1:da:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:33:36 2026 by rpki-client